8 results about "Trusted system" patented technology

The application belongs to the field of trusted system testing, and discloses a kind of SIS trusted system booting trusted function test method and system, the application is by automatically constructing test environment and centralized configuration test case on automation test host, so that test process does not need manual setting device parameter one by one, avoid the problem of omission and inconsistency caused by manual configuration, improve the efficiency and accuracy of test preparation stage.In the application, the steps of automatically executing restart, modifying the verification object, restoring the file, etc. are performed by remotely connecting the device under test, which makes the process that originally requires manual repeated operation mechanized and repeatable, thereby reducing the risk of misoperation caused by manual intervention.In terms of trust measurement data collection, the trusted chain and measurement information are automatically sent to the test host after each start of the device under test, and the test host can obtain the complete measurement chain in a timely and systematic manner, avoiding the omission problem that may occur when manually comparing logs and PCR values.

The present invention relates to a trust system for managing overseas funds and domestic foreign currency deposits. To this end, a trust system for managing overseas funds and domestic foreign currency deposits according to one embodiment of the present invention comprises: a fund manager server that provides a foreign currency operation fund instruction to a bank server; and the bank server including an asset custody system that receives the foreign currency operation fund instruction and an integrated financial system that generates transaction details by currency. The bank server, based on the foreign currency operation fund instruction received from the fund manager server, increases or decreases the balance of the fund, links the asset custody system and the integrated financial system to generate a message regarding the increase or decrease in the fund balance and proceeds with multiple settlements, performs linked processing for incoming remittances that increase the fund balance and outgoing remittances that decrease the fund balance in the integrated financial system, and at the daily closing, can verify whether the funds match between the deposit and withdrawal balance details of each fund and the foreign currency trust account.

The application belongs to the technical field of information security, and provides a trusted cloud level standardization framework system and a quantitative mapping method, which is executed by one or more processors deployed on a server or an authentication platform, is based on a predefined trusted cloud level standardization framework system and a unified data security level measurement, and comprises the following steps: a receiving step of receiving qualitative security control items from an external standardization framework; and an automatic process of "parsing-mapping-evaluating-generating" for converting the external qualitative control items into digital levels based on the unified measurement, which not only improves the traditional compliance judgment from binary qualitative to fine quantitative, realizes accurate comparison of security capabilities, but also provides a core technical path for realizing automatic compliance evaluation, generating intuitive and trusted credit scores, and constructing an end-to-end verifiable supply chain trust system.

Techniques for implementing and utilizing ordered temporary credentials for a zero-trust system implemented in a multi-tenant cloud provider network are described. An Access Management (AM) service obtains ordering configuration indicating a sequence or pattern of requests that are allowed to be made in association with a credential or session. In authorizing requests made to services, the AM service can determine if the request, together with any other requests made via the credential or session, matches the constraints defined by the ordering configuration, and deny an access when the request would violate the ordering configuration.

The application discloses a kind of based on blockchain enhanced trusted system, which includes bottom hardware layer, middleware layer and blockchain layer.Bottom hardware layer executes trusted start and measurement by the trusted intelligent interconnection board card of integrated trusted cryptographic module, generates and signs measurement voucher;The middleware layer receives, verifies and assembles voucher into blockchain transaction;Blockchain layer uses alliance chain network, realizes the distributed management of device identity, the non-tamperable storage of measurement record and the dynamic execution of verification strategy by three smart contracts of registration contract, verification contract and strategy contract.The application effectively solves the problems in traditional trusted computing, such as the measurement result being easily tampered with, the dependence on centralized verification service, and the difficulty in policy synchronization, and realizes high-trusted, auditable and decentralized automated remote attestation.

This invention provides a periodic dynamic measurement method and system based on a trusted system, belonging to the field of data processing. The method includes: performing trusted startup on the trusted system and loading a dynamic measurement kernel module; initializing a dynamic measurement strategy and creating dynamic measurement tasks based on the loaded dynamic measurement kernel module; executing the dynamic measurement tasks based on the dynamic measurement strategy; returning the calculation results of the dynamic measurement to the dynamic measurement kernel thread, and using the dynamic measurement kernel thread to determine the final execution result of the dynamic measurement task based on the dynamic measurement results and the dynamic measurement strategy. This invention can meet the needs of embedded scenarios with high requirements for security, reliability, and real-time performance, and is suitable for trusted systems in embedded scenarios with high security and real-time requirements.

The application discloses a kind of based on RSA accumulator's credential hierarchical management method device and system, introduce one more than one secondary trusted node and primary trusted node, primary trusted node is responsible for increasing and deleting element in RSA accumulator, do not participate in evidence calculation;Secondary trusted node directly calculates and issues corresponding evidence according to the exclusive parameter obtained from the primary trusted node;The present application under trusted system, whether it is primary trusted node or secondary trusted node can well protect the information stored by oneself, and then guarantee the security of algorithm;When adding new credential, secondary trusted node directly calculates using exclusive parameter, without traversing other elements;When deleting credential, primary trusted node directly calculates using parameter, without traversing other elements;Credential addition and deletion and certificate issuance are stripped, multiple secondary nodes can be set, to realize the hierarchical management of credential;Realize traceability, can be completed evidence traceability by primary trusted node, to find evidence issuer.